CVE-2024-37289

🗓️ 10 Jun 2024 21:22:34Reported by trendmicroType

Improper access control vulnerability in Trend Micro Apex One, allows local privilege escalation on affected installations

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-37289	14 Mar 202519:44	–	circl
CNNVD	Trend Micro Apex One 安全漏洞	10 Jun 202400:00	–	cnnvd
CNVD	Trend Micro Apex One Access Control Error Vulnerability (CNVD-2024-40819)	12 Jun 202400:00	–	cnvd
Cvelist	CVE-2024-37289	10 Jun 202421:22	–	cvelist
EUVD	EUVD-2024-36562	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Trend Micro products	20 Jun 202405:59	–	jvn
NCSC	Vulnerabilities fixed in Trend Micro Apex One	11 Jun 202411:51	–	ncsc
NVD	CVE-2024-37289	10 Jun 202422:15	–	nvd
OSV	CVE-2024-37289	10 Jun 202422:15	–	osv
Positive Technologies	PT-2023-9228 · Trend Micro · Trend Micro Apex One	22 Aug 202300:00	–	ptsecurity

NVD

Node

trendmicro apex_oneRange<14.0.13139saas

trendmicro apex_oneRange14.0–14.0.0.12980-

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "2019 (14.0)",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "14.0.0.12980"
      }
    ]
  },
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One as a Service",
    "versions": [
      {
        "version": "SaaS\t",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "14.0.13139"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/dcx/s/solution/000298063
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-577/

16 Jun 2025 21:06Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.8

EPSS0.00095

SSVC

CWE-284